links

EOM / (Continued)

Threat Level

Privacy, Crime and Security Online

[0x1] Police Arrest 3 Anonymous Members Allegedly Connected to Sony Hack
[0x2] Studio Might Alter Tattoo in Hangover DVD Release
[0x3] NSA Whistleblower to Plead Guilty to Misdemeanor
[0x4] Citi Credit Card Data Breached for 200,000 Customers
[0x5] Supreme Court Upholds $290 Million Infringement Award Against Microsoft
[0x6] Former Navy SEAL Helms CNN WikiLeaks Doc
[0x7] School-Webcam Spy Scandal Resurfaces
[0x8] Bank Not Responsible for Letting Hackers Steal $300K From Customer
[0x9] RSA Agrees to Replace Security Tokens After Admitting Compromise
[0xA] Senate Confirms Former RIAA Lawyer for Solicitor General

XSSed syndication

You are welcome to syndicate and share xssed.com contents

[0x1] Exploitation of Self-Only Cross-Site Scripting in Google Code
[0x2] The Beginners Guide to XSS
[0x3] Blog: Reducing XSS by way of Automatic Context-Aware Escaping in Template Systems
[0x4] Browser Hijacking Techniques 2009
[0x5] WordPress.com permanent XSS vulnerability
[0x6] How to write a XSS (cross site scripting) worm for McCodes sites
[0x7] Open redirect vulnerabilities: definition and prevention
[0x8] Paper: Smashing the Web for fun & profit using XSS
[0x9] Paper: Defending against XSS with .NET
[0xA] Paper: Carnival, or how to camouflage data for XSS filters

HeapOverflow Computer Security Community & Forums : Heap Overflow.com

Computer security community with forums, blogs and directory covering exploit, vulnerability, advisory with various penetration testing tools.

[0x1] CVE-2011-1711 (data_synchronizer, mobility_pack)
[0x2] CVE-2011-2107 (flash_player, acrobat, acrobat_reader)
[0x3] CVE-2011-2395 (ios)
[0x4] CVE-2011-2468 (anymacro_mail_system)
[0x5] CVE-2010-4804 (android)
[0x6] CVE-2011-1823 (android)
[0x7] CVE-2009-5076 (cre_loaded)
[0x8] CVE-2010-4663 (cms_made_simple)
[0x9] CVE-2011-1584 (dotclear)
[0xA] CVE-2011-2386 (site_survey)

Securitas Operandi™

Incorporating security and risk into everyday thought.

[0x1] Classification of data center reliability
[0x2] Amidst the Growing Web, We Are Rushing Back to Client-Server Computing
[0x3] Taking a Wider View of Application Security
[0x4] Compliance risk, the risk management trump card
[0x5] Car hacking, the crime of the future
[0x6] Social media safety during the holidays
[0x7] Preventing browser hijacking
[0x8] Showcase your cloud security knowledge with a CCSK cert
[0x9] I’m back, after a year off
[0xA] Certification and Experience: Putting the Cart Before the Horse

Rational Survivability

Hoff's Ramblings about Information Survivability, Information Centricity, Risk Management and Disruptive Innovation. Oh, I have a fondness for virtualization and cloud computing security, too...

[0x1] (Physical, Virtualized and Cloud) Security Automation – An API Example
[0x2] Cloud & Virtualization Stacks: Users Fear Lock-In, Ecosystem Fears Lock-Out…
[0x3] Security: “There’s No Discipline In Our Discipline”
[0x4] Clouds, WAFs, Messaging Buses and API Security…
[0x5] Incomplete Thought: The Curious Case Of the Carnival Cloud
[0x6] The State Of the Art In Cloud Security…
[0x7] Quick Ping: VMware’s Horizon App Manager – A Big Bet That Will Pay Off…
[0x8] More On Cloud and Hardware Root Of Trust: Trusting Cloud Services with Intel® TXT
[0x9] Hacking The Cloud – Popular Science!?
[0xA] On Stacked Turtles & the AWS Outage…

The new Security and Penetration Testing Community

A new Information and Penetration Testing Protal for all security and network professionals. The site include a number of whitehat hacking tools and documents like nmap,dsniff,etterkap,yersinia,cisco security.

[0x1] Advance Web Hacking
[0x2] Honeypot
[0x3] The Conflicker Worm
[0x4] Thoughts on Security of the Corporate documents
[0x5] Are Security Audits necessary ?
[0x6] RFID, its implications and how to defeat
[0x7] Assesing Risks
[0x8] FBI Raids: Pertinent or Paranoid?
[0x9] Protecting Children Online
[0xA] Sarbanes Oxley and IT

Panda Research Blog

Leading the way in proactive malware detection

[0x1] Tis the comparative season
[0x2] Microsoft’s 6-year long open door to malware
[0x3] Panda Antivirus Command Line Scanner 9.5.1.2
[0x4] AV-Test.org 2010 Test Results
[0x5] Microsoft just doesn’t get it…. Security is about diversity
[0x6] Dear Microsoft: Please Stop Pushing Potentially Unwanted Software Through Windows Update
[0x7] Virus Bulletin 2010
[0x8] AV-Comparatives Performance Test 2010
[0x9] PC Security Labs July 2010 Test Results
[0xA] AV-Test Q2-2010 Full Product Test Results

Paul Thurrott's WinInfo News

News about Windows and Microsoft. No fluff.

[0x1] WinInfo Short Takes, June 10, 2011
[0x2] Newsflash: US Supreme Court Rules Against Microsoft in i4i Patent Case
[0x3] Is Microsoft Prepping Its Own Windows 8 Tablet?
[0x4] Apple iOS and Apple Mac OS X "Lion"
[0x5] The Microsoft Antitrust Lawsuit Ends... and a New ’Secret’ Microsoft Arises
[0x6] E3 2011: Nintendo Steals the Show with Innovative New Wii
[0x7] Microsoft Hits One Out of the Park with Windows 8 Start Screen
[0x8] Microsoft Officially Backs AT&T Purchase of T-Mobile
[0x9] China Denies Google Accusation on Hack
[0xA] E3 2011: Sony Apologies for Hack, Announces Vita Handheld

Info Security News

Carries news items (generally from mainstream sources) that relate to security.

[0x1] Moderator's note: We're changing hosts!
[0x2] Lockheed Martin investigates possible link between cyber attack and RSA data breach
[0x3] Honda security breach exposes 283,000 customers
[0x4] Survey: Breaches Cost Some Healthcare Organizations $100K Per Day
[0x5] 35 Million Google Profiles Captured In Database
[0x6] [Dataloss Weekly Summary] Week of Sunday, May 22, 2011
[0x7] CALL FOR POSTERS - 4th Summer School on Network and Information Security (NIS'11)
[0x8] Lockheed Martin Bets Big on Quantum Computing
[0x9] InsecureID: No more secrets?
[0xA] Manal al-Sharif Imprisoned For 10 More Days For Driving in Saudi Arabia

TechBU

Latest technology, Social media news and computing tips

[0x1] How To: Get 1 Year Subscription of Kaspersky Internet Security 2011 for FREE [Legally]
[0x2] iPhone 5 to have 8MP Camera with new Camera-Flash position
[0x3] What is Comment SPAM and how to STOP it
[0x4] Breaking News – iOS 5 Jailbroken, Cydia Installed and Works Perfectly! [Pictures Included]
[0x5] Twitter Launches Photo & Video Search
[0x6] WWDC 2011: Announcements and Wrap-Up
[0x7] Little Known Ways to Search Google, How to Find Anything Fast
[0x8] New iOS 5 image appears just before WWDC 2011: Fake or Real?
[0x9] iOS 5 + Mac OS X Lion + iCloud = WWDC 2011
[0xA] How CAPTCHA works and its Importance

mr_me's IT security blog

Exploiting, Reversing, Fuzzing, Code Analysis and Web Application Security

[0x1] Ruxmon presentation – Hostile exploitation under win32
[0x2] Securabit interview, ie aurora dep bypass
[0x3] Breaking web security – its all about RCE.
[0x4] Heap Overflows For Humans – 101
[0x5] Format strings, from %x to calc
[0x6] Taking control of a JSP environment
[0x7] Bypassing ASLR and DEP under Windows
[0x8] Unicode, the magic of exploiting 0×00410041
[0x9] Oracle 10 & 11g exp.exe 0day Stack Overflow
[0xA] Debugging an SEH 0day

CSO Blogs - Physical Security

[0x1] Commissioned by Roger Enright
[0x2] Cyber Counterintelligence Doctrine - Offensive CI
[0x3] ALqaida Strike 1.4 - Half Life hack
[0x4] What this weekend means to me
[0x5] Project Cyber Dawn
[0x6] CIOs Must Meet Minimum Necessary - Building Information Systems Like Building Houses
[0x7] Real-time, Actionable Intelligence I Can Have Today!
[0x8] Supply Chain Security and Usama bin Laden
[0x9] Cyber Security Warning System
[0xA] People, People, People

http://www.derkeiler.com/Mailing-Lists/securityfocus/pen-test

Pen-Test

[0x1] Mysql Password Auditor v1.0 is Released
[0x2] Whats Next? Attack of Internal IP Disclosure
[0x3] Arachni v0.2.3 has been released (Open Source Web Application Security Scanner Framework)
[0x4] [OT] Remote OS Fingerprinting - ICMP/TCP
[0x5] Formal Social Engineering Methodology Released
[0x6] Ruxcon 2011 Call For Papers
[0x7] Finding pen-testers
[0x8] IIS 7 Header Block Module - Released
[0x9] Backtrack 5 Released !!
[0xA] t211: Call for Papers 2011 (Helsinki / Finland)

Microsoft news from Network World

Breaking Microsoft news and analysis from NetworkWorld.com

[0x1] Warning: Urgent Microsoft update may be Firefox malware
[0x2] Microsoft loses i4i Supreme Court patent case
[0x3] As iPad sales boom, Gartner downgrades PC forecast
[0x4] 8 hot features in Windows 8
[0x5] Brocade's virtualization strategy: We use everything
[0x6] Developers find a lot to love in Windows Phone 7 Mango
[0x7] Steve Ballmer: Office 365 to launch in June
[0x8] 6 changes in Windows Phone Mango target business users
[0x9] Microsoft seen not to blame for Skype rejecting open source company
[0xA] Skype voice service crashes; users offered fix instructions

The Geek Stuff

Guides, HowTos and Tips for Technology Geeks

[0x1] Top 7 Free SFTP or SCP Clients for Windows (Transfer Files to Linux)
[0x2] 7 Default OpenSSH Security Options You Should Change in /etc/ssh/sshd_config
[0x3] Linux File Systems: Ext2 vs Ext3 vs Ext4
[0x4] Cron Vs Anacron: How to Setup Anacron on Linux (With an Example)
[0x5] 10 iozone Examples for Disk I/O Performance Measurement on Linux
[0x6] Subversion Tutorial: 10 Most Used SVN Commands with Examples
[0x7] 5 Methods to Identify Your Linux File System Type (Ext2 or Ext3 or Ext4)
[0x8] UNIX / Linux: 7 Practical PS Command Examples for Process Monitoring
[0x9] Get Your Copy of Sed and Awk 101 Hacks eBook
[0xA] 10 Useful Sar (Sysstat) Examples for UNIX / Linux Performance Monitoring

LinuxSecurity.com: Ubuntu Advisories

The central voice for Linux and Open Source security news.

[0x1] Study: Spammers use e-mail ID to gain legitimacy
[0x2] Using the sec-wall Security Proxy
[0x3] Ubuntu: 1145-1: QEMU vulnerabilities
[0x4] Ubuntu: 1146-1: Linux kernel vulnerabilities
[0x5] Ubuntu: 1122-3: Thunderbird regression
[0x6] Ubuntu: 1144-1: Subversion vulnerabilities
[0x7] Ubuntu: 1143-1: Dovecot vulnerability
[0x8] Ubuntu: 1142-1: GDM vulnerability
[0x9] Ubuntu: 1141-1: Linux kernel vulnerabilities
[0xA] Ubuntu: 1139-1: Bind vulnerabilities

Published Security Alerts

Published Security Alerts

[0x1] SQL Injection in SYS.KUPV$FT in Oracle 10g. Rel. 1
[0x2] SQL Injection in SYS.KUPV$FT_INT in Oracle 10g. Rel. 1
[0x3] Event 10053 logs TDE wallet password in cleartext
[0x4] Transparent Data Encryption stores key unencrypted in the SGA
[0x5] Cross-Site-Scripting in Oracle Workflow wf_route
[0x6] Cross-Site-Scripting in Oracle Workflow wf_monitor
[0x7] Shutdown listener via iSQL*Plus
[0x8] Shutdown listener via Forms Servlet
[0x9] Plaintext Passwords logged during Installation of Oracle HTMLDB
[0xA] Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB

Juniper

Juniper RSS Feed

[0x1] Signature Update #1934
[0x2] Federal Government executives and Cybersecurity
[0x3] Signature Update #1933
[0x4] Juniper Networks Sets New Standard for Online Support as Company Ranked Among World's Best for the Sixth Consecutive Year
[0x5] World IPv6 day (Test Flight)
[0x6] IPv6 Transition Strategies
[0x7] Signature Update #1932
[0x8] World IPv6 day
[0x9] Signature Update #1931
[0xA] Healthcare Industry: Trending Toward Better Care Through Cloud Security

CIO Security

Latest Security issues from CIO UK

[0x1] Moving targets
[0x2] Nokia CTO takes 'leave of absence'
[0x3] Citigroup security breach exposed data on 210,000 customers
[0x4] Three must-haves to securing the social web
[0x5] Severn Trent Water accused of SAP faults causing water shortage
[0x6] Ofcom IT leader gets jailed for £500k fraud
[0x7] Microsoft rumoured to build its own Windows 8 tablet
[0x8] Surrey's Kingston and Sutton councils merge IT departments
[0x9] MoD cyber attacked 1,000 times a year
[0xA] CIOs, don't wait for the business to set its strategy say Forrester

Advisory Files ≈ Packet Storm

Packet Storm - Full Disclosure Information Security News and Files

[0x1] Debian Security Advisory 2256-1
[0x2] Ubuntu Security Notice USN-1145-1
[0x3] Secunia Security Advisory 44853
[0x4] Secunia Security Advisory 44882
[0x5] Secunia Security Advisory 44884
[0x6] Secunia Security Advisory 44748
[0x7] Secunia Security Advisory 44843
[0x8] Secunia Security Advisory 44881
[0x9] Secunia Security Advisory 44876
[0xA] Secunia Security Advisory 44842

An Expert's Guide to Database Solutions

Experienced DBA, Strategist, Architect, and Performance Expert James Koopmann provides information, guidance, technical savvy, and solutions for your database needs.

[0x1] Oracle 11g Security - Guidelines for auditing
[0x2] Oracle 11g Security - Setting default auditing as recommended by Oracle
[0x3] Oracle 11g Security - Getting started with standard auditing
[0x4] Oracle 11g Security - An Introduction to Secure Sockets Layer (SSL)
[0x5] Oracle 11g Security - Securing Client Connections: OS Authentication
[0x6] Oracle 11g Security - Securing Client Connections: Client & Server
[0x7] Explicit GRANTs and ROLES within Oracle
[0x8] Oracle 11g Security - Object privileges and synonym usage in Oracle
[0x9] The Power of Oracle PROFILES
[0xA] Oracle Flashback Version Query-pseudocolumns designed to investigate when changes occur

lkml.org

lkml.org - the realtime linux kernel mailinglist archive

[0x1] Re: [PATCH 05/10] MCE: Mask out address mask bits below address gr ...
[0x2] Re: [PATCH] Make GFP_DMA allocations w/o ZONE_DMA emit a warning i ...
[0x3] Re: 3.0-rcX BUG at fs/btrfs/ioctl.c:432 - bisected
[0x4] Re: [PATCH] Make GFP_DMA allocations w/o ZONE_DMA emit a warning i ...
[0x5] Re: [PATCH 00/10] mm: Linux VM Infrastructure to support Memory Po ...
[0x6] Re: 3.0-rcX BUG at fs/btrfs/ioctl.c:432 - bisected
[0x7] Re: [PATCH v3] usb:dummy_hcd: Force FS device connection according ...
[0x8] Re: 3.0-rcX BUG at fs/btrfs/ioctl.c:432 - bisected
[0x9] Re: 3.0-rcX BUG at fs/btrfs/ioctl.c:432 - bisected
[0xA] Re: linux-next: Tree for May 26 (drivers/base/node.c)

CNET News.com

Tech news and business reports by CNET News. Focused oninformation technology, core topics include computers, hardware, software,networking, and Internet media..

[0x1] Spain says it has arrested Anonymous hackers
[0x2] Anonymous takes down Turkish site to protest censorship
[0x3] LulzSec hackers--just having a laugh?
[0x4] Anonymous warns NATO not to challenge it
[0x5] Many top iPhone, Android apps face security woes
[0x6] Senators target Bitcoin currency, citing drug sales
[0x7] How I saved my butt after losing my phone
[0x8] Report: Hackers accessed Citigroup customer data
[0x9] Sony Pictures says 37,500 customer records exposed
[0xA] Attacks on Sony, others show it's open hacking season

Narkolayev Shlomi

Cutting Edge Information Security Posts.

[0x1] Linkedin ViewLink and ViewArticle mechanism opens new kind of Phishing attacks
[0x2] SCADA Exploitation - Hacking into national infrastructures
[0x3] Source-Link-Phishing (A.K.A. TabNabbing) - New type of phishing attack
[0x4] Directory Traversal Cheat Sheet
[0x5] ClickJacking Advertisement
[0x6] Hacking Citrix and Terminal Server Techniques
[0x7] Hacking the Planet - By TinKode
[0x8] ClickJacking Facebook
[0x9] Find SQL Injection using Google Dorks
[0xA] Defeating Frame Busting Scripts

Unwired: Building & Maintaining Secure Wireless Networks

Journey into the latest in wireless technology! You'll find updates on new security issues and vulnerabilities, information on IEEE standards, advice on networking hardware, and unique insight on building and maintaining a secure wireless network.

[0x1] Quantum Cryptography
[0x2] In-Flight Wi-Fi
[0x3] Economic effects on IT Field
[0x4] Blackberry Storm Simulator
[0x5] 3G Wireless
[0x6] Wireless Network Users have Come a Long Way!
[0x7] Dilemma of a Passionate Programmer
[0x8] Can Old Wireless Network Interface Cards be Upgraded to Support WPA?
[0x9] Ramifications of a Cracked WPA Passphrase
[0xA] More Ramblings on WiFi Allergies

CSOONLINE.com - Other

[0x1] Resumption of the crypto wars?
[0x2] PCI 2.0 reviewed
[0x3] How to do a hotel room security check
[0x4] Schneier: Eavesdropping on 'smart homes'
[0x5] "The biggest and worst deal in security history"
[0x6] Passwords in the wild: the future
[0x7] Website vulnerability analysis: fast, cheap, good - pick 2
[0x8] Riggins: FAIR and vulnerabilities
[0x9] Bejtlich: Dell needs a PSIRT
[0xA] Trojan pong and other visualizations

Web App Security

Provides insights on the unique challenges which make web applications notoriously hard to secure, as well as attack methods including SQL injection, cross-site scripting (XSS), cross-site request forgery, and more.

[0x1] [HITB-Announce] HITB2011AMS Conference Materials & Photos
[0x2] pentest tool for dos
[0x3] Re: Pentesting of Thick client and client-server applications
[0x4] Re: Pentesting of Thick client and client-server applications
[0x5] Re: Pentesting of Thick client and client-server applications
[0x6] Pentesting of Thick client and client-server applications
[0x7] OWASP Zed Attack Proxy version 1.3.0
[0x8] Burp Suite Free Edition v1.4 released
[0x9] Talsoft S.R.L. Security Advisory - WordPress User IDs and User Names Disclosure
[0xA] Slides on parameter pollution

Kioptrix

Learning Security together

[0x1] Well… We’ve been hacked
[0x2] Challenge VM #3 is now available.
[0x3] Getting to know GDB…
[0x4] Vigilante justice… was it worth it?
[0x5] Some hacked sites and StuxNet rootkit reversed…
[0x6] Parterned up with Hackus!
[0x7] Owned and Exposed at it again
[0x8] Using Sulley on local application
[0x9] From SANS: This could be interesting…
[0xA] News from SANS

Security Watch

Security Watch is a resource center for everything related to tech security: the latest news, review summaries and advice on security-related topics. We show you how you can protect your online identity and keep your computer safe.

[0x1] Bank Malware's a Big Deal, But Don't Believe the Hype
[0x2] Busy Patch Tuesday Coming From Microsoft and Adobe
[0x3] Banks Sign Up With Trusteer For Security
[0x4] RSA Offers Replacement of SecurID Tokens For Some
[0x5] Stolen Sony Passwords Show Weak User Habits
[0x6] Adobe Releases Emergency Flash Security Update
[0x7] Syria Back Online
[0x8] Mobile Devices Favor Malware and Phishing
[0x9] Syria Being Taken Off the Internet
[0xA] Hundreds of High-Profile GMail Accounts Compromised

Security Watch

[0x1] End of Year Security Reports, The Complete List
[0x2] GSM Security, 2011
[0x3] Ad Networks Drive-by Download attack
[0x4] Materials, SecTor 2010
[0x5] Google Hacking Database Reborn
[0x6] Reports, State of the Internet 2010, CA Threat Landscape
[0x7] Materials, VB2010 conference
[0x8] Reports, NSSLabs Consumer Anti-Malware Products Test Report Q3 2010
[0x9] Materials, HITB Malaysia, 2010
[0xA] Patching Days for Oracle, Java, and Microsoft

Capi's Corner

Development, Network, Security, Ideas & Opinions

[0x1] Fix two Ubuntu 10.04 window manager annoyances
[0x2] The power of git aliases
[0x3] OCZ Vertex2, Linux, and ancient nForce 430 chipset
[0x4] Remaining Windows Vista/7 “rearm count”
[0x5] Novatel Merlin U740 using only Windows 7 onboard tools
[0x6] tr.im to be shut down
[0x7] URL shortening services soon to be under siege?
[0x8] Windows Vista Home/Business/Enterprise has a telnet client, too
[0x9] How to force Git to consider a file as binary
[0xA] Router default password database

LinuxSecurity.com: Debian Advisories

The central voice for Linux and Open Source security news.

[0x1] Study: Spammers use e-mail ID to gain legitimacy
[0x2] Using the sec-wall Security Proxy
[0x3] Debian: 2257-1: vlc: heap-based buffer overflow
[0x4] Debian: 2256-1: tiff: buffer overflow
[0x5] Debian: 2255-1: libxml2: buffer overflow
[0x6] Debian: : oprofile: command injection
[0x7] Debian: 2253-1: fontforge: buffer overflow
[0x8] Debian: 2252-1: dovecot: programming error
[0x9] Debian: 2251-1: subversion: Multiple vulnerabilities
[0xA] Debian: 2250-1: citadel: denial of service

F-Secure Antivirus Research Weblog

Weblog of F-Secure Antivirus Research Team

[0x1] Does Facesnoop Really Hack Facebook Accounts?
[0x2] Anonymous: who will be the ultimate decider?
[0x3] ISSA Event on June 9th
[0x4] Facebook Attackers Now Hiding Behind Porn Sites
[0x5] Another Android Malware Utilizing a Root Exploit
[0x6] British Intelligence Vandalizing Extremist Online Magazines
[0x7] Mac Market Share x Google Images SEO Poisoning = Gold Rush
[0x8] Quick Snapshot of Trojan:AndroidOS/AdSMS.B
[0x9] Facebook Finally Blocks Malware Attack
[0xA] Facebook Attack Spreading both Windows AND Mac malware

Aladdin Knowledge Systems Latest eToken Press Releases

Aladdin Knowledge Systems Latest eToken Press Releases - RSS Feed

[0x1] Ontario's York Regional Police Meet Canadian Government Regulations with Aladdin eToken
[0x2] Russian Bank Secures Online Banking with Aladdin Authentication
[0x3] Aladdin eToken Solidifies Its Position in Government Sector on Carahsoft GSA Schedule
[0x4] Aladdin eToken and Aladdin SafeWord are Verified as Citrix Ready
[0x5] Aladdin and Wyse Partner to Secure Virtual Desktops
[0x6] Korea's Largest Bank Deploys 5,000 Aladdin eToken Authentication Devices
[0x7] Aladdin Secures Transactions for China's Largest Online Financial Information and Services Provider
[0x8] Aladdin eToken Debuts New Generation of Strong Authentication Solutions
[0x9] Toronto-Area Police Secure Data and Meet CPIC Regulations with Aladdin eToken
[0xA] Secure Computing Named Reader Trust Finalist in SC Magazine Award Program and Best of 2006 in Three Categories

Murky

Tending to Geekiness

[0x1] London 2012 Tickets – What I would have done.
[0x2] Links for 2011-06-06 [del.icio.us]
[0x3] Links for 2011-06-04 [del.icio.us]
[0x4] Links for 2011-06-03 [del.icio.us]
[0x5] Links for 2011-06-02 [del.icio.us]
[0x6] Links for 2011-06-01 [del.icio.us]
[0x7] Links for 2011-05-26 [del.icio.us]
[0x8] Links for 2011-05-21 [del.icio.us]
[0x9] London 2012 Tickets
[0xA] Japan Earthquake and Tsunami

Latest MITRE News

The MITRE Corporation is a not–for–profit organization chartered to work in the public interest. As a national resource, we apply our expertise in systems engineering, information technology, operational concepts, and enterprise modernization to address our sponsors' critical needs.

[0x1] MITRE Appoints Barbara Toohill Vice President and Director of the Homeland Security Systems Engineering and Development Institute
[0x2] Dr. George Campbell Jr. Elected to MITRE's Board of Trustees
[0x3] MITRE Holds Meeting on PerformanceStat
[0x4] MITRE Receives American Psychological Association's Healthy Workplace Award
[0x5] MITRE's Gary Gagnon Elected to Cyber Committee of AFCEA International
[0x6] Computerworld Honors Joel Jacobs as a Premier 100 IT Leader
[0x7] MITRE Employees Honored at Black Engineer of the Year Awards Conference
[0x8] MITRE–Harvard Team Develops First Programmable Nanoprocessor
[0x9] FORTUNE Names MITRE a "Best Company to Work For" 10 Years in a Row
[0xA] MITRE Launches Challenge: Invites Ideas from Industry, Academia, and Individuals

Security Watch

Security Watch is a resource center for everything related to tech security: the latest news, review summaries and advice on security-related topics. We show you how you can protect your online identity and keep your computer safe.

[0x1] Bank Malware's a Big Deal, But Don't Believe the Hype
[0x2] Busy Patch Tuesday Coming From Microsoft and Adobe
[0x3] Banks Sign Up With Trusteer For Security
[0x4] RSA Offers Replacement of SecurID Tokens For Some
[0x5] Stolen Sony Passwords Show Weak User Habits
[0x6] Adobe Releases Emergency Flash Security Update
[0x7] Syria Back Online
[0x8] Mobile Devices Favor Malware and Phishing
[0x9] Syria Being Taken Off the Internet
[0xA] Hundreds of High-Profile GMail Accounts Compromised

Reuters: Top News

Reuters.com is your source for breaking news, business, financial and investing news, including personal finance and stocks. Reuters is the leading global provider of news, financial information and technology solutions to the world's media, financial institutions, businesses and individuals.

[0x1] Fed prepares for last spurt of easy money flood
[0x2] May budget deficit less than half prior year's
[0x3] Clinton says not pursuing World Bank job
[0x4] Import prices rise for 8th straight month
[0x5] Some exchange executives turn cool on merger mania
[0x6] Fed's Dudley: Growth to pick up, but risks increased
[0x7] Gates parting shot warns NATO risks irrelevance
[0x8] Alaska emails may shine light on Sarah Palin
[0x9] Syrian forces kill 28; some troops mutiny
[0xA] Face transplant performed on woman mauled by chimpanzee

LinuxSecurity.com: Slackware Advisories

The central voice for Linux and Open Source security news.

[0x1] Study: Spammers use e-mail ID to gain legitimacy
[0x2] Using the sec-wall Security Proxy
[0x3] Slackware: 2011-147-01: bind: Security Update
[0x4] Slackware: 2011-145-02: httpd: Security Update
[0x5] Slackware: 2011-145-01: apr/apr-util: Security Update
[0x6] Slackware: 2011-133-02: httpd: Security Update
[0x7] Slackware: 2011-133-01: apr/apr-util: Security Update
[0x8] Slackware: 2011-122-02: mozilla-thunderbird: Security Update
[0x9] Slackware: 2011-122-03: seamonkey: Security Update
[0xA] Slackware: 2011-122-01: mozilla-firefox: Security Update

Christopher Mills

A place for stuff I write.

[0x1] The Future Of Cloud Is Assured
[0x2] Not Safe For Math Majors
[0x3] Flag Question From My Dad
[0x4] What’s on your (ideal) border?
[0x5] That Shrimp Damn Near Melted My Face Off
[0x6] Today is cookie-baking day
[0x7] New Direction For This Blog
[0x8] Article: The Best Way To Remediate
[0x9] Installing and Configuring suPHP on CentOS 5.x
[0xA] Common Remediation Owner Enumeration (My Faux Standard In Development)

Moreover Technologies - Computer security news

Computer security news - more than 340 categories of real-time RSS news feeds

[0x1] Free Business and Tech Magazines. Sign up Today!
[0x2] EU states agree on tougher sanctions on cybercrime
[0x3] The Business of Defense: Cyber Attacks? ? 7 hrs ago
[0x4] Citigroup Confirms Customer Accounts Hacked
[0x5] Citigroup Confirms Customer Accounts Hacked
[0x6] Police to probe new hacking claims
[0x7] Spain nabs 3 suspected of global cyber attacks
[0x8] Codemasters website down ?for foreseeable future? after hacking attack
[0x9] Spain nabs 3 suspected of global cyber attacks
[0xA] Citigroup Confirms Customer Accounts Hacked

Observations from a Tech Architect: Enterprise Implementation Issues & Solutions

Enterprise Technology Architect Craig Borysowich shares the challenges and achievements of enterprise solution design and implementation.

[0x1] Technical Architecture: Software Product Evaluation Checklist
[0x2] Technical Architecture: Operational Factors Checklist
[0x3] Technical Architecture: Technical Requirements Checklist
[0x4] Technical Architecture: Test Planning-Verification & Validation
[0x5] Technical Architecture: Test Planning-Integration Testing Process
[0x6] Technical Architecture: Test Planning-System Testing Elements
[0x7] Technical Architecture: Test Planning-Testing Hierarchy
[0x8] Technical Architecture: Test Planning-Testing Plans
[0x9] Technical Architecture: Criteria for Evaluating Human-Machine Interfaces-Response Times
[0xA] Technical Architecture: Criteria for Evaluating Human-Machine Interfaces-Error Messages

CGISecurity - Website and Application Security News

All things related to website, database, SDL, and application security since 2000.

[0x1] NIST publishes 50kish vulnerable code samples in Java/C/C++, is officially krad
[0x2] How not to publish SCADA security advisories
[0x3] The OWASP AppSec USA 2011 Call for Papers (CFP)
[0x4] Easy Method For Detecting Caching Proxies
[0x5] Announcing WASC Web Hacking Incident Database (WHID) Mail-list
[0x6] WASC Party at RSA
[0x7] Tracking and understanding security related defects: Useful data points for shaping your SDLC program
[0x8] Most common password for Gawker users is 123456
[0x9] Improving ASP.NET Security with Visual Studio 2010 Code Analysis
[0xA] New Silicon Valley security conference - BayThreat

Ksplice

System administration and software blog

[0x1] Improving your social life with git
[0x2] Security Advisory: Plumber Injection Attack in Bowser’s Castle
[0x3] disown, zombie children, and the uninterruptible sleep
[0x4] Mapping your network with nmap
[0x5] Happy Birthday Ksplice Uptrack!
[0x6] 8 gdb tricks you should know
[0x7] Coffee shop Internet access
[0x8] Solving problems with proc
[0x9] Hosting backdoors in hardware
[0xA] Anatomy of a Debian package

ThinkGeek :: Clearance Products

Stuff for Smart Masses - Clearance Items

[0x1] Angry Birds iPad 2 Cases
[0x2] Magic Missile and Fireball d20 Soaps
[0x3] Figure 9 Carabiner
[0x4] Star Wars Millennium Falcon Model
[0x5] Teh Itteh Bitteh Book of Kittehs
[0x6] Liquid Bookmark
[0x7] Sushi Pillows
[0x8] GP2X Wiz MAME/Amiga/Console Emulator
[0x9] Love Energy Potion
[0xA] Steel Tavern Puzzles

shell-fu

[0x1] Tip #894: Watch for Ubuntu 9.10 Launch
[0x2] Tip #892: Check memory and swap from command line
[0x3] Tip #889: Convert virtually any video into a DVD-valid MPEG2 stream
[0x4] Tip #885: Random password generator.
[0x5] Tip #882: Find last modified files on a filesystem
[0x6] Tip #879: Learn not to mistype ls
[0x7] Tip #878: Random xkcd comic
[0x8] Tip #874: Count how many packages have been installed by pacman
[0x9] Tip #873: Import ssh host keys without verification
[0xA] Tip #872: Reverse geocode with bash

I Am Security

Security news and research

[0x1] How great perimeter defenses are hurting you
[0x2] Local PayPal Phishing – and why we need a CERT
[0x3] The curious case of Dropbox security
[0x4] SCADA, control systems and security – not necessarily enemies
[0x5] Defense through Offense, and how APT fits there
[0x6] Defining Penetration Testing
[0x7] About CyberWar, Deterrence, and Espionage
[0x8] Information Security Intelligence Report for 2010 and Predictions for 2011
[0x9] the art of not thinking about elephants
[0xA] Building a brand loyalty – how NOT to

IBM Internet Security Systems Frequency X Blog

Frequency X, the blog site for IBM Internet Security Systems' world-renowned security research and development team, X-Force, provides an opportunity for the researchers to converse directly with the world about threats and vulnerability research.

[0x1] Common Vulnerability Reporting Format (CVRF) is announced!
[0x2] May 2011 Microsoft Super Tuesday
[0x3] Another wave of ZIP attachment spam
[0x4] SQL Slammer Gradually Returns...
[0x5] April 2011 Microsoft Super Tuesday
[0x6] IBM X-Force 2010 Trend Report launched!
[0x7] SQL Slammer?s mysterious disappearance
[0x8] Analyzing a Mass SQL Injection Attack - Lizamoon
[0x9] Monitoring SecurID Authentication Failures
[0xA] The Rustock Takedown and Global Spam Volumes

SecTechno

Information Security Blog

[0x1] XPLICO Tool for Network Forensic
[0x2] RawCap Tiny Sniffer For Windows
[0x3] 10 steps To Protect MS Based System This Summer
[0x4] How secure is RSA’s SecurID?
[0x5] Schema.org Collection of Schemas For Webmasters
[0x6] PANBuster Data Bank Tracker
[0x7] Automating Malware Analysis Cycle
[0x8] New release of John the Ripper Password Cracker
[0x9] Cisco Releases Security Advisories for Multiple Products
[0xA] E-Mail Attack Using SET

Room362.com RSS Feed

Blog

[0x1] Remotely Suspend All Threads with Meterpreter
[0x2] Remote DLL Injection with Meterpreter
[0x3] Dumping Hashes on Win2k8 R2 x64 with Metasploit
[0x4] Exploitable Mobile App Challenge
[0x5] IPv6 Attacks
[0x6] RSA Dun-got hacked! APT etc..
[0x7] Metasploit VNC Password Extraction
[0x8] Creating Vulnerabilities: NFS Exports
[0x9] Destructive DOSKEY aliases
[0xA] Psychological Warfare with NirCMD

Famous Pete Wood Security

My friends tease me about my role in promoting First Base Technologies through public speaking, articles and interviews ... hence calling me 'Famous Pete Wood Security'

[0x1] Cloud Security Alliance UK & Ireland
[0x2] Cyber Security In Real-Time Systems and CNI
[0x3] Cloud Security Alliance UK and Ireland
[0x4] A Software Engineer, a Hardware Engineer and a Departmental Manager ...
[0x5] Festive Greetings
[0x6] Fighting malware in your browser
[0x7] Vote for us!
[0x8] Personal mobile devices
[0x9] May 2010 ramblings
[0xA] Hot topics for 2010 - discuss!

Liquidmatrix Security Digest

Bringing Fire To The Village: Your Source For Computer, Network & Information Security News

[0x1] MI6 Attacks al-Qaeda in ‘Operation Cupcake’
[0x2] Sony Pwnage Timeline
[0x3] Wireless Hacking On The Go
[0x4] Gmail Users Compromised
[0x5] Possibly 120K Android Users Infected With New Variant Of Malware
[0x6] Road Warrior: Two Laptops, One Bag
[0x7] Honda Canada Hacked: 283,000 Car Owners’ Info Stolen
[0x8] Sony: The Town Bike
[0x9] Banking Rootkits With 64-bit Support
[0xA] ISC2 On Ethics

Cert Party

An Emergency Reponse Team Faster Than Superman Himself

[0x1] Web application Pentest went Great
[0x2] Mind mapped Windows Debugging reference
[0x3] Muslim pussy ownz you
[0x4] Search for a Pid without using ps and grep
[0x5] A C Based Open Source Web Application Firewall (WAF) Community Edition
[0x6] Log Tailer
[0x7] Bruteforcing on GPU's
[0x8] a dirty hack for converting a string to hex to little endian representation
[0x9] India's $35 Tablet- The Everything Killer
[0xA] Bluekaizen

Free IT - Data Management Magazines and Downloads from bestsecuritytips.tradepub.com

Free publications and offers about databases and data management.

[0x1] Moving to the Cloud
[0x2] Cloud Computing - Latest Buzzword or a Glimpse of the Future?
[0x3] Why Cloud-Based Security and Archiving Make Sense
[0x4] Agile BI: Three Steps to Analytic Heaven
[0x5] Business Answers at Your Fingertips: The Real-Time Value of BI
[0x6] Open Sesame: Why Open Source BI, Data Integration, and Data Warehousing Solutions are Gaining in Acceptance
[0x7] Oracle Magazine
[0x8] PCI-DSS Compliance and GFI Software Products
[0x9] Proving the ROI of ECM to Your CFO
[0xA] Business Intelligence Best Practices Benchmark Report

AskApache

Advanced Web Development

[0x1] Enhanced printenv Script for Server Debugging
[0x2] Windows Batch Script saves Screenshots every 10min
[0x3] Terminal Escape Code Zen
[0x4] Advanced Linux Debugging using a Bootloader (GRUB)
[0x5] PHP to handle HTTP Status Codes for ErrorDocument
[0x6] AskApache Password Protection 4.7 Update in 2 Weeks
[0x7] Adding YouTube Videos To Website, 4 Methods
[0x8] Creating an Offline Version of Page
[0x9] Ultimate Htaccess Part II
[0xA] Dealing with Mobile Visitors using Bad Browsers

Zero Day Blog RSS | ZDNet

[0x1] European Union plans tougher penalties to deter cybercrime, botnets
[0x2] Adobe readies 'critical' PDF Reader Patch Tuesday
[0x3] Spamvertised United Parcel Service emails lead to scareware
[0x4] Mitnick: Lulzsec 'quite bold'
[0x5] Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office
[0x6] Hackers exploiting Flash Player XSS vulnerability
[0x7] Sony Europe hacked by Lebanese grey hat hacker
[0x8] 'Hot Lesbian Video - Rihanna and Hayden Panettiere' scam on Facebook leads to Mac malware
[0x9] Microsoft ships free malware cleaner that boots from CD or USB
[0xA] Android becomes second most popular malware haven in Q1

(Continued)


EOM / (Continued)